diff options
| author |   Chris Donley <christopher.donley@huawei.com> | 2018-05-30 15:36:10 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2018-05-30 15:36:10 +0000 |
| commit | 7474aaff317d979b432c4d3b215d68e626d2cab9 (patch) | |
| tree | a329cb60aa04fcfa817a8dffee71bfbb6d84741c | |
| parent | 45bdf56392705c7e20c8aeaf22814d6a5f889428 (diff) | |
| parent | 0b1f0328979d4ec139de11b52a2c2d24959da67f (diff) | |
Merge "Document Security section of the Release Notes"
| -rw-r--r-- | docs/release-notes.rst | 19 |
1 files changed, 16 insertions, 3 deletions
diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 02c2b8e..916627f 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -17,7 +17,7 @@ Version: 1.1.0 -------------- -:Release Date: 2018-05-24 +:Release Date: 2018-06-07 @@ -34,9 +34,22 @@ Version: 1.1.0 **Known Issues** +**Security Notes** -**Security Issues** - * https://wiki.onap.org/pages/viewpage.action?pageId=28377592 +ONAP has adopted the `CII Best Practice Badge Program <https://bestpractices.coreinfrastructure.org/en>`_. The goal of the Beijing release is for all ONAP projects to be close to achieving a CII Passing badge. + +VNFSDK code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities found in these scans are closed. The 'VNFSDK security vulnerabilities and their workarounds <https://bestpractices.coreinfrastructure.org/en/projects/1588>'_ have been documented as part of the project. + +***Quick Links*** + - `VNFSDK project page <https://wiki.onap.org/display/DW/VNF+SDK+Project>'_ + + - `Badging information for VNFSDK <https://bestpractices.coreinfrastructure.org/en/projects/1588>'_ + + - `Project Vulnerability Review Table for VNFSDK <https://wiki.onap.org/pages/viewpage.action?pageId=28377592>'_ + + - `Badging Requirements <https://github.com/coreinfrastructure/best-practices-badge#core-infrastructure-initiative-best-practices-badge>'_ + + - `Badging Status for all ONAP projects <https://bestpractices.coreinfrastructure.org/en/projects?q=onap>'_ **Upgrade Notes** * Updated to use Swagger for APIs |